Security
"We're just seeing them all over the place."
Control systems – and the entire software supply chain – needs work too, but even air-gapping isn't sufficient mitigation, Congress told.
Cloudflare’s CSO: “The principle is to make exploitation harder for an attacker even when a bug exists”
Webworm group has expanded outside of Europe to target EU countries and South Africa.
One poisoned extension. One trusted developer. Goodbye, private repositories. Claude Code configurations being targeted.
Bank of England to financial firms: Be ready to triage and remediate vulnerabilities faster
Redmond "lists this as a Microsoft Word bug, which may or may not be entirely accurate... it is a genuine Outlook 0-click RCE"
Re-emerging supply chain attack hitting hundreds of packages with tens of millions of weekly downloads.
"The current coordination model really needs to be improved..."